Known vulnerabilities in the Infility Global plugin
14 security advisories have been published for the Infility Global plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Infility Global - Cross-Site Scripting (XSS) (CVE-2026-10734) HIGH
- Infility Global - SQL Injection (CVE-2026-8163) HIGH
- Infility Global - SQL Injection (CVE-2026-8685) MEDIUM
- Infility Global - SQL Injection (CVE-2025-15268) HIGH
- Infility Global - Cross-Site Scripting (XSS) (CVE-2025-68864) HIGH
- Infility Global - SQL Injection (CVE-2025-68865) CRITICAL
- Infility Global - Remote Code Execution (CVE-2025-12968) HIGH
- Infility Global - Path Traversal (CVE-2025-47650) MEDIUM
- Infility Global - Cross-Site Scripting (XSS) (CVE-2025-47652) HIGH
- Infility Global - Cross-Site Scripting (XSS) (CVE-2025-52774) HIGH
- Infility Global - SQL Injection (CVE-2025-47651) HIGH
- Infility Global - Cross-Site Scripting (XSS) (CVE-2024-12723) MEDIUM
- Infility Global - Cross-Site Scripting (XSS) (CVE-2024-12290) MEDIUM
- Infility Global - Broken Access Control (CVE-2024-11496) MEDIUM